$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: QIqQtRCAFT5ZXzFuOg2QpUS14mvpw0D8skAP6HmLqBw= Subject key identifier: 5A:A0:A6:7D:53:31:2D:A2:4A:77:12:C1:65:45:39:7D:86:2F:9C:8C Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: 0120 Signing time: Wed 25 Mar 2026 04:56:34 +0000 Manifest this update: Wed 25 Mar 2026 04:56:34 +0000 Manifest next update: Wed 01 Apr 2026 04:56:34 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: ZPH6EkjnfL46rXZ3nhC4VtqF2JtxA3Z5zJEGUx/2+TM=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: C/Dz5vP/i7ehgevrtOH4L4XLoJmF8Srje/xvQBy1o+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: Mar 25 04:56:34 2026 GMT Not After : Apr 1 04:56:34 2026 GMT Subject: CN=69c36b02-5308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:35:f9:f2:b4:ef:87:b8:ee:00:65:d2:5c: c4:6b:b2:bf:5c:af:ae:14:b7:d9:cf:cc:01:1c:b1: ac:6a:ee:f1:67:9f:3b:d4:2e:ad:f1:91:56:bb:b3: 98:2e:d6:04:bf:79:88:71:3f:9f:5c:c1:79:5a:73: bd:20:6a:7d:63:46:8a:fe:83:bf:4d:cc:f7:97:ce: 90:c0:c7:1f:a8:8a:b7:f2:28:a5:00:24:48:85:51: 1d:ff:12:1b:77:75:d9:db:24:58:4d:99:cf:51:e7: af:2c:f6:20:dd:a4:6a:33:03:0e:e3:49:d1:d7:f5: 12:a0:4c:91:ed:39:a1:35:77:8b:53:77:e6:68:5d: 08:2f:60:28:8f:7a:96:d5:19:ac:a1:06:9b:5b:98: b2:d0:3a:16:98:b2:e8:07:cc:28:47:d2:b7:30:97: eb:4d:49:82:f3:88:74:6d:c0:aa:8e:5c:37:0f:cf: 07:ad:cb:11:22:0a:cb:10:9b:32:91:3b:77:a6:a1: 8d:4f:4f:54:34:02:15:25:79:0f:fa:fc:5a:98:89: ed:fa:0e:37:75:38:48:46:db:5f:0d:ac:8b:b8:62: 0b:14:bc:52:e3:fb:5d:d3:82:f1:cd:91:ee:07:86: 24:44:39:90:ab:94:ea:6f:5b:67:bb:cd:48:5f:ea: 2d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:A6:7D:53:31:2D:A2:4A:77:12:C1:65:45:39:7D:86:2F:9C:8C X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7b:72:ed:52:a9:7a:a1:3c:fa:97:a2:9b:ad:72:4b:97:ca: fa:12:72:e8:7c:44:c5:1e:2c:ff:1b:86:6e:06:96:cc:19:7c: ec:97:8b:da:a8:26:71:70:7e:b6:ec:10:25:a3:41:b4:be:cb: 1b:11:8b:bd:41:1d:25:16:67:ff:bc:30:df:5d:f1:6c:64:d1: 3a:fc:ae:00:4f:c7:a2:fb:90:bc:48:ff:bf:22:40:09:c0:ef: a0:a5:23:e0:d3:bd:db:22:f1:18:b5:40:09:b0:7f:7c:39:6b: 25:46:bc:fe:ba:c8:16:36:41:fe:1e:94:97:f3:34:2d:f0:a7: d2:a6:c9:2a:83:b3:dd:dd:fe:e9:6d:34:3f:48:10:86:c1:d0: 6b:83:b6:50:60:57:f0:3d:9e:2e:3d:50:b6:a6:ac:41:ea:47: af:40:7f:d5:56:99:46:67:13:92:5f:81:2e:af:f9:05:8f:6d: f1:f4:75:14:6c:88:0b:10:cf:88:d6:be:84:9c:7e:15:5f:e2: ed:c3:66:7d:e0:f5:c0:0c:c0:89:85:60:d3:66:a7:a7:c8:63: e2:f3:49:83:fb:2b:a3:28:86:88:4d:3b:2d:a6:04:b1:a1:99: 60:79:2a:53:11:5e:3d:73:0d:d5:d5:20:de:e2:2f:2d:89:1c: d6:b9:ff:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz REZGNDU2QzMwHhcNMjYwMzI1MDQ1NjM0WhcNMjYwNDAxMDQ1NjM0WjAYMRYwFAYD VQQDEw02OWMzNmIwMi01MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWY1+fK074e47gBl0lzEa7K/XK+uFLfZz8wBHLGsau7xZ5871C6t8ZFWu7OY LtYEv3mIcT+fXMF5WnO9IGp9Y0aK/oO/Tcz3l86QwMcfqIq38iilACRIhVEd/xIb d3XZ2yRYTZnPUeevLPYg3aRqMwMO40nR1/USoEyR7TmhNXeLU3fmaF0IL2Aoj3qW 1RmsoQabW5iy0DoWmLLoB8woR9K3MJfrTUmC84h0bcCqjlw3D88HrcsRIgrLEJsy kTt3pqGNT09UNAIVJXkP+vxamInt+g43dThIRttfDayLuGILFLxS4/td04LxzZHu B4YkRDmQq5Tqb1tnu81IX+otXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqgpn1T MS2iSncSwWVFOX2GL5yMMB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds UmtXenN0LXk0S0E5XzBWc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm3ty7VKpeqE8+peim61yS5fK+hJy6HxExR4s/xuGbgaWzBl87JeL2qgmcXB+ tuwQJaNBtL7LGxGLvUEdJRZn/7ww313xbGTROvyuAE/HovuQvEj/vyJACcDvoKUj 4NO92yLxGLVACbB/fDlrJUa8/rrIFjZB/h6Ul/M0LfCn0qbJKoOz3d3+6W00P0gQ hsHQa4O2UGBX8D2eLj1QtqasQepHr0B/1VaZRmcTkl+BLq/5BY9t8fR1FGyICxDP iNa+hJx+FV/i7cNmfeD1wAzAiYVg02anp8hj4vNJg/sroyiGiE07LaYEsaGZYHkq UxFePXMN1dUg3uIvLYkc1rn/Cg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:08 2026 by rpki-client